This requirement for ID only began recently; I purchased the same product some months ago with no ID. They're probably expanding the amount of data they collect in advance of the new (GDPR-inspired) privacy laws that go into effect here next month.

https://oag.ca.gov/system/files/attachments/press_releases/C...

You're not telling me anything I don't already know, but I think you're overlooking the asymmetrical problems wherein it's far easier for corporations to collect data (even with these regulatory requirements) than for individuals to maintain even basic privacy.